CVE-2005-4444

Stack-based buffer overflow in the trace message functionality in Pegasus Mail 4.21a through 4.21c and 4.30PB1 allow remote attackers to execute arbitrary code via a long POP3 reply.

• CWE-119

• http://secunia.com/advisories/17992Patch, Vendor Advisory
• http://secunia.com/secunia_research/2005-61/advisory/Vendor Advisory
• http://securitytracker.com/id?1015385
• http://www.osvdb.org/21842
• http://www.pmail.com/newsflash.htm#secuniaPatch, Vendor Advisory
• http://www.securityfocus.com/archive/1/419908/100/0/threaded
• http://www.securityfocus.com/bid/15973
• http://www.vupen.com/english/advisories/2005/3004Vendor Advisory
• http://secunia.com/advisories/17992Patch, Vendor Advisory
• http://secunia.com/secunia_research/2005-61/advisory/Vendor Advisory
• http://securitytracker.com/id?1015385
• http://www.osvdb.org/21842
• http://www.pmail.com/newsflash.htm#secuniaPatch, Vendor Advisory
• http://www.securityfocus.com/archive/1/419908/100/0/threaded
• http://www.securityfocus.com/bid/15973
• http://www.vupen.com/english/advisories/2005/3004Vendor Advisory

Published

Dec 21, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-4438Heap-based buffer overflow in Dec2Rar.dll 3.2.14.3, as distr…
• CVE-2005-4439Buffer overflow in ELOG elogd 2.6.0-beta4 allows remote atta…
• CVE-2005-4440The 802.1q VLAN protocol allows remote attackers to bypass n…
• CVE-2005-4441The PVLAN protocol allows remote attackers to bypass network…
• CVE-2005-4442Untrusted search path vulnerability in OpenLDAP before 2.2.2…
• CVE-2005-4443Untrusted search path vulnerability in Gauche before 0.8.6-r…
• CVE-2005-4445Off-by-one error in Pegasus Mail 4.21a through 4.21c and 4.3…
• CVE-2005-4446Cross-site scripting (XSS) vulnerability in index.asp in ASP…
• CVE-2005-4447SQL injection vulnerability in articles\articles_funcs.php i…
• CVE-2005-4448FlatNuke 2.5.6 verifies authentication credentials based on …
• CVE-2005-4449verify.php in FlatNuke 2.5.6 allows remote authenticated adm…
• CVE-2005-4450Cross-site request forgery (CSRF) vulnerability in phpMyAdmi…